CVE-2022-35535 - WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml

Back Back to CVE browser

CRITICAL

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml

Published Aug 9, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.28%

Description

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-adding-extender-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-adding-extender-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 9, 2022

Updated Aug 3, 2024

Reserved Jul 11, 2022

Link CVE-2022-35535

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-35535

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-35535

Description

Affected products

Remediation

References (1)

Change history (0)